[whatwg] Input URL State and Files object

[Ian Hickson]

On Mon, 2 Aug 2010, Charles Pritchard wrote:
> >
> > [ UAs can use <input type=file> to let the user enter remote URLs ]
>
> When a user through selection, click+drag or manual entry of a URL 
> should the browser still submit an Origin request header? It seems that 
> CORS doesn't come into effect here -- but at the same time, it'd be 
> handy for logging purposes and added security.

I don't think there'd be an origin, but that's rather up to the user 
agent. (In this case it's acting on behalf of the user, not the page, so I 
don't think it makes sense to give the page's origin.)

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'